BIT-airflow-2023-25754

vendorUSosv

Apache Airflow: Privilege escalation using airflow logs

view advisory published 2024-03-06Licence: per source

Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-25754US	critical9.8	2.28% (83rd)	—	2023-05-08
Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.